{"level":"info","ts":"2026-07-25T17:17:12Z","logger":"setup","msg":"Starting certs generator"}
{"action":"setting up cert rotation","caller":"main.go:232","level":"info","op":"startup","ts":"2026-07-25T17:17:12Z"}
{"level":"info","ts":"2026-07-25T17:17:12Z","logger":"setup","msg":"starting frr-k8s","version":"version v0.0.1 (no build information)"}
{"level":"info","ts":"2026-07-25T17:17:12Z","logger":"controller-runtime.metrics","msg":"Starting metrics server"}
{"level":"info","ts":"2026-07-25T17:17:12Z","logger":"cert-rotation","msg":"starting cert rotator controller"}
{"level":"info","ts":"2026-07-25T17:17:12Z","msg":"Starting EventSource","controller":"cert-rotator","source":"kind source: *v1.Secret"}
{"level":"info","ts":"2026-07-25T17:17:12Z","msg":"Starting EventSource","controller":"cert-rotator","source":"kind source: *unstructured.Unstructured"}
{"level":"info","ts":"2026-07-25T17:17:12Z","msg":"Starting Controller","controller":"cert-rotator"}
{"level":"info","ts":"2026-07-25T17:17:12Z","logger":"controller-runtime.metrics","msg":"Serving metrics server","bindAddress":":7572","secure":false}
{"level":"info","ts":"2026-07-25T17:17:12Z","logger":"cert-rotation","msg":"refreshing CA and server certs"}
{"level":"info","ts":"2026-07-25T17:17:12Z","msg":"Starting workers","controller":"cert-rotator","worker count":1}
{"level":"info","ts":"2026-07-25T17:17:12Z","logger":"cert-rotation","msg":"refreshing CA and server certs"}
{"level":"info","ts":"2026-07-25T17:17:14Z","logger":"cert-rotation","msg":"server certs refreshed"}
{"level":"error","ts":"2026-07-25T17:17:14Z","logger":"cert-rotation","msg":"could not refresh CA and server certs","error":"Operation cannot be fulfilled on secrets \"frr-k8s-webhook-server-cert\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/open-policy-agent/cert-controller/pkg/rotator.(*CertRotator).refreshCertIfNeeded.func1\n\t/go/pkg/mod/github.com/open-policy-agent/cert-controller@v0.10.2-0.20240531181455-2649f121ab97/pkg/rotator/rotator.go:322\nk8s.io/apimachinery/pkg/util/wait.runConditionWithCrashProtection\n\t/go/pkg/mod/k8s.io/apimachinery@v0.31.4/pkg/util/wait/wait.go:145\nk8s.io/apimachinery/pkg/util/wait.ExponentialBackoff\n\t/go/pkg/mod/k8s.io/apimachinery@v0.31.4/pkg/util/wait/backoff.go:461\ngithub.com/open-policy-agent/cert-controller/pkg/rotator.(*CertRotator).refreshCertIfNeeded\n\t/go/pkg/mod/github.com/open-policy-agent/cert-controller@v0.10.2-0.20240531181455-2649f121ab97/pkg/rotator/rotator.go:350\ngithub.com/open-policy-agent/cert-controller/pkg/rotator.(*CertRotator).Start\n\t/go/pkg/mod/github.com/open-policy-agent/cert-controller@v0.10.2-0.20240531181455-2649f121ab97/pkg/rotator/rotator.go:278\nsigs.k8s.io/controller-runtime/pkg/manager.(*runnableGroup).reconcile.func1\n\t/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.19.0/pkg/manager/runnable_group.go:226"}
{"level":"info","ts":"2026-07-25T17:17:14Z","logger":"cert-rotation","msg":"no cert refresh needed"}
{"level":"info","ts":"2026-07-25T17:17:14Z","logger":"cert-rotation","msg":"Ensuring CA cert","name":"frr-k8s-validating-webhook-configuration","gvk":"admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration","name":"frr-k8s-validating-webhook-configuration","gvk":"admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration"}
{"level":"info","ts":"2026-07-25T17:17:14Z","logger":"cert-rotation","msg":"no cert refresh needed"}
{"level":"info","ts":"2026-07-25T17:17:14Z","logger":"cert-rotation","msg":"Ensuring CA cert","name":"frr-k8s-validating-webhook-configuration","gvk":"admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration","name":"frr-k8s-validating-webhook-configuration","gvk":"admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration"}
{"level":"info","ts":"2026-07-25T17:17:14Z","logger":"cert-rotation","msg":"no cert refresh needed"}
{"level":"info","ts":"2026-07-25T17:17:15Z","logger":"cert-rotation","msg":"certs are ready in /tmp/k8s-webhook-server/serving-certs"}
{"level":"info","ts":"2026-07-25T17:17:15Z","logger":"cert-rotation","msg":"CA certs are injected to webhooks"}
{"level":"info","ts":"2026-07-25T17:17:15Z","logger":"setup","msg":"Starting webhooks"}
{"action":"webhooks enabled","caller":"main.go:255","level":"info","op":"startup","ts":"2026-07-25T17:17:15Z"}
{"level":"info","ts":"2026-07-25T17:17:15Z","logger":"controller-runtime.webhook","msg":"Registering webhook","path":"/validate-frrk8s-metallb-io-v1beta1-frrconfiguration"}
{"level":"info","ts":"2026-07-25T17:17:15Z","logger":"controller-runtime.webhook","msg":"Starting webhook server"}
{"level":"info","ts":"2026-07-25T17:17:15Z","logger":"controller-runtime.certwatcher","msg":"Updated current TLS certificate"}
{"level":"info","ts":"2026-07-25T17:17:15Z","logger":"controller-runtime.webhook","msg":"Serving webhook server","host":"","port":9443}
{"level":"info","ts":"2026-07-25T17:17:15Z","logger":"controller-runtime.certwatcher","msg":"Starting certificate watcher"}